PT-2026-28664 · Code Projects · Online Food Ordering System

Ahmadmarzook · Published 2026-03-26 · Updated 2026-03-27 · CVE-2026-4900

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions code-projects Online Food Ordering System version 1.0

Description A weakness exists in code-projects Online Food Ordering System 1.0. The issue affects an unknown part of the file /dbfood/localhost.sql, potentially leading to unauthorized access to files or directories. The attack can be initiated remotely, and an exploit has been publicly released. Modifying the configuration settings is advised.

Recommendations Modify the configuration settings.

Exploit

Fix

Files Accessible to External Parties

Weakness Enumeration

CWE-552

CWE-425

Related Identifiers

CVE-2026-4900

Affected Products

Online Food Ordering System

References · 7

• 🔥 https://github.com/ahmadmarz10-hub/CVEsMarz/blob/main/Online%20Food%20Ordering%20System%20in%20PHP%201.0%20%E2%80%93%20Sensitive%20Information%20Disclosure.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-4900 · Security Note
• https://vuldb.com/?id.353642 · Note
• https://vuldb.com/?submit.776980 · Note
• https://code-projects.org · Note
• https://vuldb.com/?ctiid.353642 · Note
• https://twitter.com/CVEnew/status/2037513417431326987 · Twitter Post